WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
html5-audio-player
Published
2024-06-28
Title
Html5 Audio Player < 2.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
html5-audio-player
Published
2025-04-16
Title
Html5 Audio Player < 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
html5-audio-player
Published
2025-12-18
Title
HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player 2.4.0 - 2.5.1 - Unauthenticated Server-Side Request Forgery
Slug
html5-chat
Published
2025-01-30
Title
HTML5 chat <= 1.04 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
html5-jquery-audio-player
Published
2014-08-01
Title
HTML5 jQuery Audio Player 2.3 - playlist/add_playlist.php Multiple Parameter Stored XSS Weakness
Slug
html5-jquery-audio-player
Published
2014-08-01
Title
HTML5 jQuery Audio Player 2.3 - playlist/add_playlist.php id Parameter SQL Injection
Slug
html5-lyrics-karaoke-player
Published
2024-11-18
Title
HTML5 Lyrics Karaoke Player <= 2.4 - Reflected Cross-Site Scripting
Slug
html5-maps
Published
2019-06-24
Title
HTML5 Maps <= 1.6.5.6 - CSRF & XSS
Slug
html5-maps
Published
2023-10-16
Title
HTML5 Maps < 1.7.1.5 - Arbitrary Settings Update via CSRF
Slug
html5-mp3-player-with-mp3-folder-feedburner-playlist
Published
2024-01-03
Title
HTML5 MP3 Player with Folder Feedburner <= 2.8.0 - Authenticated (Author+) PHP Object Injection
Slug
html5-mp3-player-with-playlist
Published
2014-11-27
Title
HTML5 MP3 Player with Playlist < 2.8.0 - Full Path Disclosure (FPD)
Slug
html5-mp3-player-with-playlist
Published
2024-01-03
Title
HTML5 MP3 Player with Playlist Free <= 3.0.0 - Authenticated (Author+) PHP Object Injecton
Slug
html5-responsive-faq
Published
2021-11-23
Title
HTML5 Responsive FAQ <= 2.8.5 - Admin+ Stored Cross-Site Scripting
Slug
html5-soundcloud-player-with-playlist
Published
2024-01-03
Title
HTML5 SoundCloud Player <= 2.8.0 - Authenticated (Author+) PHP Object Injection
Slug
html5-video-player
Published
2023-12-08
Title
Html5 Video Player < 2.5.19 - Subscriber+ Stored XSS
Slug
html5-video-player
Published
2024-01-30
Title
HTML5 Video Player < 2.5.25 - Unauthenticated SQLi
Slug
html5-video-player
Published
2024-05-30
Title
HTML5 Video Player < 2.5.27 - Unauthenticated SQLi
Slug
html5-video-player
Published
2024-08-16
Title
Flash & HTML5 Video < 2.5.32 - Authenticated (Subscriber+) Information Exposure
Slug
html5-video-player
Published
2024-08-16
Title
Flash & HTML5 Video < 2.5.31 - Missing Authorization
Slug
html5-video-player
Published
2024-09-10
Title
HTML5 Video Player – mp4 Video Player Plugin and Block < 2.5.35 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Slug
html5-video-player
Published
2024-09-10
Title
HTML5 Video Player – mp4 Video Player Plugin and Block < 2.5.33 - Missing Authorization in multiple functions via h5vp_ajax_handler
Slug
html5-video-player
Published
2025-01-13
Title
HTML5 Video Player – mp4 Video Player Plugin and Block < 2.5.36 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via heading Parameter
Slug
html5-video-player-with-playlist
Published
2025-04-09
Title
HTML5 Video Player with Playlist <= 2.50 - Reflected Cross-Site Scripting
Slug
html5-virtual-classroom
Published
2023-11-29
Title
BrainCert – HTML5 Virtual Classroom < 2.2 - Reflected Cross-Site Scripting
Slug
html5avmanager
Published
2014-08-01
Title
HTML5 AV Manager 0.2.7 - Arbitrary File Upload